Updated on 2024-04-11 GMT+08:00

Functions

You can use SA to centrally manage security posture of your cloud services. It includes Security Overview, Resource Manager, Event Analyses, Threat Alarms, Baseline Inspection, Events, Logs, Integrations, and more. For more information, see Table 1.

Table 1 SA functions

Function

Description

Reference

Security Overview

Displays a comprehensive overview of asset security posture together with other linked cloud security services.

  • Security Score: SA evaluates and scores your cloud asset security. You can quickly learn of unhandled risks and their threats to your assets.
  • Security Monitoring: You can view how many threats, vulnerabilities, and compliance violations that are not handled and view their details.
  • Security Scores over the Time: You can view the trend of the asset health scores for the last seven days.
  • Threat Detection: You can view how many alarms are detected for the last 7 days and their types.

Security Overview

Event Analyses

You can view alarms aggregated from HSS, WAF, and DBSS. This gives you an overall overview of the security status and risks of all your assets on the cloud.

Event Analyses

Resource Manager

SA synchronizes information about your resources and displays overall security posture in one place.

Resource Manager

Threat Alarms

In this module, SA reports alarms based on real-time monitoring, displays details of alarms for the last 180 days, and defends against typical threats by using varied preset protection policies.

  • Alarms: SA lists statistics on threat alarms. You can view details of threat alarms and details of threatened assets. You can also export all alarms.
  • Threat Analysis: You can query the number of threats or attacks by attack source or attacked asset.
  • Alarm monitoring: You can create a custom threat list, alarm type, and risk severity to view only the threat alarms of your concerns.
  • Alarm notifications: SA allows you to customize alarm notifications. You can set scheduled daily alarm notifications and real-time alarm notifications to learn about threat risks in a timely manner.

Threat Alarms

Baseline Inspection

SA can scan cloud baseline configurations to find out unsafe settings, report alarms for events, and offer hardening suggestions to you.

Baseline Inspection

Events

SA aggregates detection data from a variety of related services so that you can monitor all events in one place.

Events

Logs

You can authorize Object Storage Service (OBS) to store SA logs in OBS buckets. This makes it easier for you to store and export SA logs securely and meet audit requirements for storing logs for 180 days.

Logs

Integrations

SA integrates a variety of security products to aggregate their detection data and manage the data sources of events. You can view the amount of transmitted data and manage the health status of data reporting.

Integrations